Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

URLScan

urlscan

1

https://i0004.clarod...

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://i0004.clarodrive.com/s/YQgMDksdoFKPGGt/download?id=45b4477c-4f14-489c-a3bd-f3347e42b07a

  • Sample

    241205-vyj5lstqbv

Score
10/10
remcosmellisdiscoveryrat

Malware Config

Extracted

Family

remcos

Botnet

mellis

C2

melloreservas.kozow.com:5353

Attributes
  • audio_folder

    MicRecords

  • audio_path

    ApplicationPath

  • audio_record_time

    5

  • connect_delay

    0

  • connect_interval

    1

  • copy_file

    remcos.exe

  • copy_folder

    Remcos

  • delete_file

    false

  • hide_file

    false

  • hide_keylog_file

    false

  • install_flag

    false

  • keylog_crypt

    false

  • keylog_file

    logs.dat

  • keylog_flag

    false

  • keylog_folder

    remcos

  • mouse_option

    false

  • mutex

    Rmc-OX0E5C

  • screenshot_crypt

    false

  • screenshot_flag

    false

  • screenshot_folder

    Screenshots

  • screenshot_path

    %AppData%

  • screenshot_time

    10

  • take_screenshot_option

    false

  • take_screenshot_time

    5

Targets

    • Target

      https://i0004.clarodrive.com/s/YQgMDksdoFKPGGt/download?id=45b4477c-4f14-489c-a3bd-f3347e42b07a

    Score
    10/10
    remcosmellisdiscoveryrat

    • Remcos

      Remcos is a closed-source remote control and surveillance software.

      ratremcos

    • Remcos family

      remcos

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.